b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

Analysis

max time kernel
30991s
max time network
151s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30-11-2022 12:39

Target

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
Size

149KB
MD5

af3e76f9fcda00fc3287ac08e53ca52e
SHA1

b0dc33840f959fb39f3abdca69142e40ca094a34
SHA256

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
SHA512

adf53216f0a7613a451d959cf944b45496c837ff859bb36cda3db69cb1c185b9de0e597ba3ede0b5983be2fe09b4db7ecc9ef1e87a98a74ab5fab1f647cdb12a
SSDEEP

3072:LrbFJCact1nLNCn4IP9S6Dfnc///M/9nOmpwfvRQfZn:LrbXCact1npCB9SGfn4nM/9nOmpwfvaF

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

description ioc process

/proc/net/route /proc/net/route b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

description ioc process

/proc/net/route /proc/net/route b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

description	ioc	process
/proc/net/route	/proc/net/route	b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

description	ioc	process
/proc/net/route	/proc/net/route	b95dbe3c95c158dccc3774a3ced6923160e05dc205bdca281aa9bb5fa0aba441

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact